[SERVER-50065] Add OCSP tests for Certificate Rotation Created: 31/Jul/20 Updated: 29/Oct/23 Resolved: 13/Aug/20 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | None |
| Fix Version/s: | 4.7.0, 4.4.2 |
| Type: | Task | Priority: | Major - P3 |
| Reporter: | Shreyas Kalyan | Assignee: | Mark Benvenuto |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||||||||||
| Backport Requested: |
v4.4, v4.2, v4.0
|
||||||||||||||||||||
| Sprint: | Security 2020-08-10, Security 2020-08-24 | ||||||||||||||||||||
| Participants: | |||||||||||||||||||||
| Description |
|
When we start the server, we fetch the OCSP response for stapling asynchronously. When we rotate, we fetch the response synchronously, cancelling rotation if the certificates have been revoked. We want to test this functionality for rotation to ensure that the rotation is cancelled. |
| Comments |
| Comment by Githook User [ 21/Sep/20 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: (cherry picked from commit cb6ad17249e8ff4f00ffe5a8ddc25719a3811222) |
| Comment by Githook User [ 21/Sep/20 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: (cherry picked from commit f789d24cf6c57621ba7a40a257dbe9a09b06414e) |
| Comment by Githook User [ 13/Aug/20 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |
| Comment by Githook User [ 13/Aug/20 ] |
|
Author: {'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}Message: |